Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: ogRSbSLjxJeKJvzKFqOuSdOb9hwAvblU0+TYJYt7Tfs=
Subject key identifier: 64:3B:8E:92:FA:33:E3:1B:20:36:1E:50:85:C5:68:C9:EA:E6:D0:E1
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019F183143F4E95A295892B4857A0A770A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 1382
Signing time: Tue 30 Jun 2026 11:01:49 +0000
Manifest this update: Tue 30 Jun 2026 11:01:49 +0000
Manifest next update: Wed 01 Jul 2026 11:01:49 +0000
Files and hashes: 1: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: fapAFA3oHY75GSCqpX4ynSZDgRi7Df9uc1rjOgqKWDE=)
2: oHaqxqTMWybml5c6wSCcPWrN2MI.roa (hash: ASmpLH273yXVFzp2LFZCIwFoN6v91nXnKPxcq712jXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:43:f4:e9:5a:29:58:92:b4:85:7a:0a:77:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jun 30 11:01:49 2026 GMT
Not After : Jul 1 11:01:49 2026 GMT
Subject: CN=643b8e92fa33e31b20361e5085c568c9eae6d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:a2:17:42:47:5b:c7:eb:07:0d:28:fe:85:
24:0f:9c:52:80:f1:49:a5:cd:5c:41:4c:aa:4c:3b:
7b:e1:68:5f:b7:48:25:2e:70:a8:1e:68:c3:80:2d:
e5:88:7d:b1:22:83:46:4f:65:7e:94:70:7b:02:e7:
4f:17:f5:90:66:b3:29:16:d0:47:54:82:2c:de:60:
00:42:98:3b:8a:e7:c2:3e:39:dd:18:ac:cd:fe:70:
29:55:5f:8d:9e:ba:bb:ca:68:31:de:bc:10:14:59:
f7:92:1a:3a:55:12:a3:e3:90:30:ce:64:55:fa:49:
da:2d:de:b9:5f:ba:35:c7:17:41:a0:f0:c0:8e:92:
e9:55:34:a9:39:c1:41:e7:fd:ff:37:b3:c7:ed:b6:
7e:d9:9b:11:a9:03:4d:f4:71:7c:47:87:ab:39:6d:
40:9d:8e:40:e0:0f:e6:3c:63:4e:18:d2:85:07:89:
04:e4:be:78:67:0b:85:ed:a4:3f:b4:6c:f7:64:ad:
50:1c:2a:86:b8:fa:ad:cf:b6:48:7e:6d:51:69:6e:
41:b1:b4:a1:84:b3:36:fb:44:9a:63:c4:b6:88:e4:
33:a4:95:08:5d:5f:3a:8a:89:03:f5:7c:a0:c2:fd:
7e:88:30:9a:15:ea:07:ba:54:e6:ab:05:9c:b7:fc:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:8E:92:FA:33:E3:1B:20:36:1E:50:85:C5:68:C9:EA:E6:D0:E1
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:10:e5:d7:4d:e7:bd:9e:6e:c9:71:69:78:0e:65:86:9d:08:
11:a1:60:7c:4d:69:86:4f:fe:c8:be:47:76:9d:24:f4:83:43:
e8:be:08:f9:11:aa:a9:9c:ad:cf:ae:f1:fe:90:c7:12:32:aa:
5e:11:e0:21:ee:56:52:ef:56:e8:5b:1e:8f:c8:e1:cd:90:9d:
33:90:e8:11:9c:e5:47:e7:7b:18:6a:4c:d5:a7:fd:d7:d8:40:
0d:ee:80:a5:f3:29:ca:d2:cb:b0:c0:53:61:a8:35:04:d0:d4:
f9:75:e0:4b:d9:24:70:77:92:eb:16:50:4d:05:db:7c:d5:27:
5b:73:53:0e:4c:16:60:60:38:df:fb:79:9f:bc:28:a7:91:49:
6a:13:b8:65:c9:48:59:93:3e:0a:df:7a:51:0e:e9:59:e9:b8:
f4:f9:12:72:4b:59:d1:b9:5a:53:05:64:94:af:bc:4d:11:7e:
4a:72:52:4f:14:89:3e:d0:4d:1c:da:f1:4c:cd:e5:55:c3:90:
94:81:75:64:3f:ef:c5:e1:a2:1b:99:ad:21:f1:75:67:05:bd:
13:e4:4c:b9:27:fb:73:01:03:ab:6b:be:5e:e6:74:4e:16:51:
4a:0e:ab:49:80:4c:a5:74:b2:1c:dc:bd:26:dc:b9:dc:6c:b3:
ac:62:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client